Privacy Policy Big 2 –
Malaysian Member Data Protection

This Privacy Policy applies to all personal information collected by Big 2 (accessible at big2.click) in the context of providing our online casino platform and Sports Betting services to users in Malaysia. It covers all channels of interaction between you and Big 2, including the website, mobile app (if applicable), email communications, live chat interactions, and WhatsApp.

By registering an account or continuing to use the platform Big 2, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not register for or continue using our platform. Please reach out to our support team if you have any concerns before making a decision.

Big 2 collects several categories of information from our members and platform users. We only collect data that is necessary for legitimate purposes clearly described in this policy.

Information You Provide Directly:

• Registration Information: Full name, date of birth, gender, mobile number, email address, and the username you chose when registering your Big 2 account.
• Identity Verification (KYC): A copy of your identity card or passport, and proof of current address (such as a utility bill or bank statement), required for account verification and withdrawal processing above certain thresholds.
• Financial Information: e-Wallet account numbers and bank account details for withdrawal purposes. Big 2 does not store full credit or debit card numbers — all payment transactions are processed through certified third-party payment processors.
• Communications: Records of live chat, email and WhatsApp conversations between you and the Big 2 support team, kept for issue resolution and service quality improvement purposes.

Automatically Collected Information:

• Platform Usage Data: Gaming records, bets placed, total deposits and withdrawals, session times and duration, and general platform usage patterns.
• Technical Data: IP address, device type, operating system, browser type, screen resolution, and other technical data collected automatically when you access our platform.
• Cookie Data: Information collected through cookies and similar tracking technologies — detailed in Section 8 of this policy.

Big 2 uses the data it collects for a range of legitimate purposes directly related to the provision of our services. Below is a detailed explanation of each purpose for which data is used:

• Account Operations: To create and manage your account, process logins, verify your identity and maintain the security of your Big 2 account.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, and to process withdrawal of winnings to the same payment methods.
• Service Provision: To allow you to play slots, Live Casino, Sports Betting, jackpots, and all other game categories on the Big 2 platform.
• Service Communications: To send important notifications related to your account — including deposit confirmations, withdrawal confirmations, security alerts, and material changes to our terms.
• Customer Support: To provide relevant and effective assistance when you contact the Big 2 support team via live chat, email, or WhatsApp.
• Fraud Prevention: To detect, investigate and prevent fraudulent activity, money laundering, multiple account ownership and other forms of platform abuse.
• Platform Improvements: To analyse aggregated usage patterns for the purpose of improving the design, performance and features of the Big 2 platform.
• Marketing (with Consent): To send information about Big 2's latest promotions, bonuses, and offers — but only to members who have given their consent to receive marketing communications.

Big 2 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. This is a commitment we take seriously. However, there are limited situations where we need to share your information with certain parties for legitimate operational purposes:

• Trusted Service Providers: We share necessary data with technology and service providers that help us operate the platform — including cloud infrastructure providers, payment processors and gaming software providers. All such providers are bound by strict data protection agreements and may not use your data for any purpose beyond what Big 2 has specified.
• Legal Requirements: Big 2 may be required to disclose certain information to the relevant authorities when mandated to do so by law, court order or valid legal process in Malaysia.
• Crime Prevention: Where there is strong evidence of fraudulent activity or money laundering, Big 2 reserves the right to report and share relevant information with the appropriate law enforcement agencies.
• Business Transfers: In the event of a merger, acquisition or sale of Big 2 assets, user data may be transferred to the new entity, which will be bound by this Privacy Policy or one offering an equivalent level of protection.

Protecting the personal and financial data of our members is among the highest priorities at Big 2. We implement multiple layers of technical and operational security to ensure your data remains protected at all times.

• 256-bit SSL Encryption: All communications between your browser and Big 2's servers are encrypted using 256-bit TLS/SSL protocol, making your data unreadable to any third party in transit.
• Secure Data Storage: Personal and financial data is stored on servers protected by multi-layered access controls, strictly configured firewalls, and real-time threat monitoring.
• Restricted Internal Access: Only Big 2 staff with a legitimate work-related need may access members' personal data, and all such access is logged for audit purposes.
• Two-Factor Authentication: Big 2 staff accounts with access to member data are protected by two-factor authentication to prevent unauthorised access.
• Regular Security Audits: The Big 2 platform undergoes regular security audits by independent cybersecurity experts to identify and address any potential vulnerabilities.
• Staff Training: All Big 2 staff who handle personal data undergo regular data protection training to ensure they understand and comply with best practices in data handling.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection against every threat. We encourage you to take protective measures on your end as well — in particular, by using a strong, unique password and never sharing your login credentials with anyone.

Big 2 retains your personal data only for as long as it is necessary for the purposes described in this policy or as required by applicable law.

• Active Account Data: For as long as your account remains active with Big 2, we retain all personal information and transaction records associated with that account.
• After Account Closure: Upon account closure, we retain transaction records and identity verification data for seven years to comply with applicable legal and financial regulatory requirements in Malaysia.
• Communication Records: Customer support conversation records are retained for two years from the date of interaction for reference and dispute resolution purposes.
• Security Logs: Access logs and security activity are retained for 12 months for security monitoring and incident investigation purposes as required.
• Marketing Data: Information used for marketing communications is retained until you withdraw your consent or request its deletion.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and internal policies Big 2, you have a number of rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 business days.
• Right to Rectification: You may request corrections to any inaccurate or incomplete information in our records. Corrections will be made within 14 working days.
• Right to Erasure: You may request the deletion of your personal data, subject to applicable legal retention obligations. Requests will be processed and you will be notified within 30 days.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while you are disputing its accuracy.
• Right to Data Portability: You have the right to receive a copy of your data in a machine-readable format for the purpose of transferring it to another service if needed.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time and without providing any reason.

To exercise any of the rights above, please contact the support team Big 2 via email at support@big2.click, stating the right you wish to exercise along with the required identity verification details. We will acknowledge receipt of your request within two business days.

Platform Big 2 uses cookies and similar tracking technologies to enhance your experience, keep you logged in, and understand how our platform is used overall.

Cookies are small text files stored on your device when you visit our website. They allow the platform to remember your preferences and settings from one session to the next.

All financial transactions at Big 2 — whether depositing via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks) — are processed through certified third-party payment processors that comply with international payment security standards.

• Big 2 Does Not Store Card Data: We do not store, process or transmit full credit or debit card numbers. All card data is handled directly by certified payment processors.
• Transaction Verification: Every deposit and withdrawal requires identity verification through an appropriate method — including an OTP sent to your registered mobile number.
• Suspicious Transaction Monitoring: Big 2's systems automatically monitor all transactions to detect suspicious patterns that may indicate account misuse or fraud.
• Transaction Records: All transaction records are securely stored and accessible to members via the transaction history view in their account.

Big 2 takes child protection extremely seriously. Our platform is designed exclusively for adults aged 18 and above, and we implement active measures to prevent access by minors.

• No Collection of Data from Minors: Big 2 does not knowingly collect personal data from individuals under the age of 18. Should we discover that such data has been collected, it will be deleted immediately.
• Age Verification: Our age verification system is designed to prevent registration by minors. Any account found to belong to a minor will be closed immediately.
• Parental Responsibility: We encourage parents and guardians to take appropriate steps to prevent minors in their care from accessing the Big 2 platform.

If you suspect that a minor has registered for or is using the platform Big 2, please contact us immediately at support@big2.click. We will investigate and take appropriate action without delay.

Big 2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate operational reasons.

When material changes are made to this policy, we will:

• Updating the "Last Updated" date at the top of this page
• Send email notifications to all active members at least 14 days before the changes take effect
• Displaying a clear notice on the Big 2 platform's main page during the notice period

Continued use of the platform Big 2 after the effective date of such changes will be deemed acceptance of the amended Privacy Policy. If you disagree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure described in Section 7.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Big 2 handle your personal data, we encourage you to contact us. We are committed to addressing every privacy enquiry seriously and within a reasonable timeframe.

• Privacy Email: Send your enquiry to support@big2.click with the subject line "Data Privacy Enquiry" to ensure it is promptly routed to the responsible team.
• Live Chat: For general privacy enquiries requiring a prompt response, our live chat support team is available 24 hours a day.
• Response Time: We are committed to acknowledging all privacy-related inquiries within two business days and providing a thorough response within 14 business days.